Botnets powered by residential proxy networks are proliferating, with nearly 60 million victim IP addresses worldwide, according to Lumen's Black Lotus Labs.
Illinois Representative Delia Ramirez has been appointed as the top Democrat on the House Homeland Security Committee's Cybersecurity and Infrastructure Protection Subcommittee, replacing Eric Swalwell following his resignation from Congress.
CISA has issued separate advisories for vulnerabilities in Zero Motorcycles electric bikes and Yadea T5 scooters that could allow attackers to upload malicious firmware or steal vehicles outright.
U.S. states levied $3.45 billion in privacy-related fines against companies in 2025 — more than the previous five years combined — driven by aggressive enforcement of laws like California's CCPA and a new multi-state regulatory coalition.
Chinese national Xu Zewei has been extradited from Italy to the United States and formally charged for his alleged role in the HAFNIUM espionage campaign, which compromised more than 12,700 U.S. organizations by exploiting Microsoft Exchange Server zero-days during the COVID-19 pandemic.
Tennessee Governor Bill Lee has signed legislation banning cryptocurrency ATMs effective July 1, citing rampant fraud targeting vulnerable residents. The move makes Tennessee the second state to outlaw the kiosks, following Indiana's ban in March.
Oral arguments in Chatrie v. United States suggest a majority of justices will rule that police geofence searches of cell phone location data constitute Fourth Amendment searches requiring a warrant.
Justices from across the ideological spectrum pressed attorneys on both sides during a two-hour session in Chatrie v. United States, a case that could reshape how law enforcement collects Americans' location data.
A fresh wave of the GlassWorm supply chain campaign has seeded 73 'sleeper' extensions into the OpenVSX marketplace, six of which have already been activated to deliver malware while the remainder are considered dormant or suspicious.
Threat actors abused a flaw in Robinhood's account creation process to inject phishing content into legitimate emails sent from noreply@robinhood.com, tricking customers into thinking their accounts had suspicious activity.